共收录 216 条相关情报。
← 返回所有主题CVE-2026-86409
Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentatio
CVE-2026-113459
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the edi
CVE-2025-44017
"Gunosy" App contains a vulnerability where sensitive information may be included in the application's outbound communic
CVE-2026-19603
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize the activ
CVE-2026-19601
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to invalidate the sto
CVE-2026-19541
Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry o
CVE-2026-66822
## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Syst
CVE-2026-52394
DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.
CVE-2026-89203
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restri
CVE-2026-108489
Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce p
CVE-2023-25996
Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-e
CVE-2026-107761
Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the c
CVE-2026-107761
Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the c
CVE-2026-62043
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
CVE-2026-42630
Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.
CVE-2026-42419
Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.
CVE-2026-66435
Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve
CVE-2026-105877
Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retri
CVE-2026-87109
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed thr
CVE-2026-87109
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed thr